Tested on CentOS 7.

List permanently enabled services:

firewall-cmd --permanent --list-services

List running config enabled services:

firewall-cmd --list-services

List permanently enabled ports:

firewall-cmd --permanent --list-ports

List enabled ports in the running config:

firewall-cmd --list-ports

List permanent config:

firewall-cmd --permanent --list-all

List running config:

firewall-cmd --list-all

Add permanently enabled service:

firewall-cmd --permanent --add-service=samba

Add an enabled service to the running config:

firewall-cmd --add-service=samba

Add a permanently enabled port range:

firewall-cmd --permanent --add-port=2500-5000/tcp

Add an enabled port range to the running config:

firewall-cmd --add-port=2500-5000/tcp