diff --git a/ansible/portal.yml b/ansible/portal.yml
index 05f8f0f..18bc510 100644
--- a/ansible/portal.yml
+++ b/ansible/portal.yml
@@ -15,5 +15,6 @@
   hosts:
     - metal-01.ih-eu-mda1.nimbus.fluffy
   roles:
+    - { role: infra-role-open-ports,    tags: open-ports    }
     - { role: infra-role-nimbus-fluffy, tags: nimbus-fluffy }
     - { role: infra-role-portal-bridge, tags: portal-bridge }
diff --git a/ansible/vars/portal-bridge.yml b/ansible/vars/portal-bridge.yml
index de7df07..1145b25 100644
--- a/ansible/vars/portal-bridge.yml
+++ b/ansible/vars/portal-bridge.yml
@@ -17,3 +17,9 @@ nimbus_fluffy_repo_branch: 'master'
 nimbus_fluffy_storage_capacity: 0
 nimbus_fluffy_rpc_port: 19900
 nimbus_fluffy_metrics_port: 19200
+
+# Open Ports
+open_ports_default_comment: 'Nimbus Portal Fluffy'
+open_ports_default_chain: 'VPN'
+open_ports_list:
+  - { port: '{{ nimbus_fluffy_metrics_port }}', ipset: 'metrics.hq' }