Run the following command to add a new custom zone with name tunnel.Note that the command is only supported with the –permanent parameter.
root@host:~# firewall-cmd --permanent --new-zone=tunnel
success
root@host:~#
Reload the firewalld configuration to activate the changes:
root@host:~# firewall-cmd --reload
success
root@host:~#