Comment # 8 on bug 900505 from Dr. Werner Fink

The systemd is configured with --disable-networkd and that is fully legal and
essential to use wicked and its services which, beside NetworkManager, are the
tools used to to networking.

The network-online.target and network.target are supported by wicked.service. 
The question rises if the line

   After=network-pre.target

in network.target only is enough for the shorewall-init.service.  AFAICS from
SuSEfirewall2_init.service there is a line

   Before=network.service

and AFAIK both wicked.service and NetworkManager.service do use the line

   Alias=network.service

in their [Install] section.