diff --git a/role-rocky-ipa-replica.yml b/role-rocky-ipa-replica.yml
index 2922d09..bd7c5a4 100644
--- a/role-rocky-ipa-replica.yml
+++ b/role-rocky-ipa-replica.yml
@@ -52,6 +52,13 @@
         name: ipa-fas
         state: present
 
+    - name: Open firewalld service before hand
+      ansible.posix.firewalld:
+        service: freeipa-4
+        permanent: true
+        immediate: true
+        state: enabled
+
   roles:
     - role: freeipa.ansible_freeipa.ipareplica
       state: present
diff --git a/role-rocky-ipa.yml b/role-rocky-ipa.yml
index 08c4332..b1151eb 100644
--- a/role-rocky-ipa.yml
+++ b/role-rocky-ipa.yml
@@ -57,6 +57,13 @@
         name: ipa-fas
         state: present
 
+    - name: Open firewalld service before hand
+      ansible.posix.firewalld:
+        service: freeipa-4
+        permanent: true
+        immediate: true
+        state: enabled
+
   roles:
     - role: freeipa.ansible_freeipa.ipaserver
       state: present