diff --git a/roles/ceph-infra/tasks/configure_firewall.yml b/roles/ceph-infra/tasks/configure_firewall.yml
index 1c905d440..9650252b0 100644
--- a/roles/ceph-infra/tasks/configure_firewall.yml
+++ b/roles/ceph-infra/tasks/configure_firewall.yml
@@ -168,9 +168,9 @@
   tags:
     - firewall
 
-- name: open iscsi ports
+- name: open iscsi api ports
   firewalld:
-    port: "5000/tcp"
+    port: "{{ api_port | default(5000) }}/tcp"
     zone: "{{ ceph_iscsi_firewall_zone }}"
     source: "{{ public_network }}"
     permanent: true