${port[*]};do firewall-cmd --zone=public --add-port=$p/tcp --permanent > /dev/null 2>&1 if [[ $? == 0 ]];then echo "$p Add successfully!" else echo "$p Add failed!" fi done firewall-cmd –reload   如果需要加入网段访问端口限制： firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.142.0/24" port protocol="tcp" port="80" accept firewall-cmd –reload 四、部署升级 4.1 部署环境说明 1) 端口检查（详见