To check the zone for which your system's firewall is configured:

# firewall-cmd --get-active-zone

The command does not display any results if the system has not been assigned to a zone.

Use the following command to display all available zones:

# firewall-cmd --get-zones
block dmz drop external home internal public trusted work

To configure your system for the work zone on a local network connected via the em1 interface:

# firewall-cmd --zone=work --change-interface=em1
success

Querying the current zone now shows that the firewall is configured on the interface em1 for the work zone:

# firewall-cmd --get-active-zone
work
  interfaces: em1

To make the change permanent, you can change the default zone for the system, for example:

# firewall-cmd --get-default-zone
public
# firewall-cmd --set-default-zone=work
success
# firewall-cmd --get-default-zone
work