However, at the end
firewall-cmd --zone=monitoring --add-interface=ens192
This results in a zone conflict. I'm not sure if it's even possible to have two zones on the interface.
Hi Nick,
I don't believe an interface can belong to multiple zones.
Instead I think you what a rich rule, the example below would add this to the default zone
firewall-cmd –add-rich-rule 'rule family=“ipv4” source address=“x.x.x.x/16” service name=“http” accept'