However, at the end > firewall-cmd --zone=monitoring --add-interface=ens192 > > This results in a zone conflict. I'm not sure if it's even possible to > have two zones on the interface. > > Hi Nick, I don't believe an interface can belong to multiple zones. Instead I think you what a rich rule, the example below would add this to the default zone firewall-cmd –add-rich-rule 'rule family=“ipv4” source address=“x.x.x.x/16” service name=“http” accept'