firewall-cmd

add / remove port

firewall-cmd --permanent --add-port=<port_num>/<protocol>
firewall-cmd --permanent --remove-port=<port_num>/<protocol>

firewall-cmd --permanent --add-port=22/tcp
firewall-cmd --permanent --remove-port=22/tcp

open port on specific ip

serverfault answer