Adding a set of ports to IpPermission

This is to enable translating GCE's Firewall.Rules, which support
RangeSets of ports, into a set of ports, so that IpPermission can
accurately reflect GCE and other possible usecases.