I try to allow SSH to the vyOS 1.4 router, however this simple conifg does not work. Where is the error?

set firewall ipv4 name TEST rule 1000 destination port '22'
set firewall ipv4 name TEST rule 1000 protocol 'tcp'
set firewall zone LOCAL from WAN firewall name 'TEST'
set firewall zone LOCAL local-zone
set firewall zone WAN interface 'eth0'

Thanks
Fatos