firewalld whitelist multiple sources

firewall-cmd --new-zone=mssql
firewall-cmd --zone=mssql --add-service=mssql

firewall-cmd --new-ipset=mssql_set --type=hash:net
firewall-cmd --ipset=mssql_set --add-entry=10.1.1.1
firewall-cmd --ipset=mssql_set --add-entry=172.16.1.0/24
firewall-cmd --zone=mssql --add-source=ipset:mssql_set

firewall-cmd --runtime-to-permanent