# firewall-cmd --get-active-zones
public
  interfaces: ens160

# firewall-cmd --get-default-zone
public

# firewall-cmd --zone=management --list-all
management (active)
  target: ACCEPT
  icmp-block-inversion: no
  interfaces: 
  sources: 10.15.0.0/16
  services: 
  ports: 
  protocols: 
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules: 

「/usr/lib/firewalld/services」以下にxmlファイルがあり、ポートを記述してあります。

# ls /usr/lib/firewalld/services/

# firewall-cmd --get-services

# firewall-cmd --add-service=https --zone=public 

# firewall-cmd --remove-service=https --zone=public

新しくzoneを作成する事で可能です。

firewall-cmd –permanent –new-zone=management
firewall-cmd –permanent –zone=management –set-target=ACCEPT
firewall-cmd –permanent –zone=management –add-source=10.15.0.0/16
firewall-cmd –reload
firewall-cmd –get-active-zone
management

sources: 10.15.0.0/24