To add an interface to a zone, for example to add em1 to the public zone, enter the following command as root:

~]# firewall-cmd --zone=public --add-interface=em1

To make this setting permanent, add the --permanent option and reload the firewall.