try this in dom0
sudo qubesctl state.sls qvm.sys-net
maybe sudo qubesctl state.sls qvm.sys-firewall will be required too
sudo qubesctl state.sls qvm.sys-firewall