firewall-cmd --add-port=3389/tcp

firewall-cmd --reload

firewall-cmd --runtime-to-permanent