Page Comparison

...

public (active)
  target: default
  icmp-block-inversion: no
  interfaces: enp0s3
  sources:
  services: dhcpv6-client ssh
  ports: 2212/tcp   <-- there may be none, several, or many here
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

To open a hole in the firewall to allow traffic in or out of a port permitted by firewalld:

sudo firewall-cmd --add-port=<port id, eg 2212>/tcp

Consult the firewalld documentation for details on how firewalld (and iptables) operates and for additional commands to reverse changes made, to make additional changes, or to disable firewalld enforcement.