Multiple Service Ports on a Single VS

You would create 'service-port-range' as a string type data group under Local Traffic -> iRules -> Data Group List. Populate the data group with your port objects.

Then use the iRule to reference it and reject anything not in the list:

when CLIENT_ACCEPTED {
 if { ! [class match [TCP::local_port] equals service-port-range] } {
    reject
    }
}