1. firewall-cmd --zone=public --permanent --add-port=22/tcp
    3. firewall-cmd --reload