diff --git a/provision/ec2.go b/provision/ec2.go
index 9c8bb9b..8d69ed2 100644
--- a/provision/ec2.go
+++ b/provision/ec2.go
@@ -270,6 +270,8 @@ func (p *EC2Provisioner) createEC2SecurityGroup(vpcID string, controlPort int, o
 	if len(extraPorts) > 0 {
 		// disable high port range if extra ports are specified
 		highPortRange = []int{}
+
+		ports = append(ports, extraPorts...)
 	}
 
 	groupName := "inlets-" + uuid.New().String()