Add assertion to test_create_security_group_rule_with_invalid_ports

This patch syncs the test from Neutron to Tempest so we can delete
it from the Neutron repo. The API change and test addition was
originally authored in patch with Git hash prefix 91c476dc.
The API change is present from Liberty forward so should be
safe to add to Tempest since it's no longer testing Kilo.

Change-Id: Ic77561757b5bd9ac61b1e059afdba19a98257126
Related-Bug: #1552960
Co-Authored-By: huangpengtao <huangpengtao@huawei.com>
diff --git a/tempest/api/network/test_security_groups_negative.py b/tempest/api/network/test_security_groups_negative.py
index b9765c8..a3b0a82 100644
--- a/tempest/api/network/test_security_groups_negative.py
+++ b/tempest/api/network/test_security_groups_negative.py
@@ -153,6 +153,7 @@
 
         # Create rule for icmp protocol with invalid ports
         states = [(1, 256, 'Invalid value for ICMP code'),
+                  (-1, 25, 'Invalid value'),
                   (None, 6, 'ICMP type (port-range-min) is missing'),
                   (300, 1, 'Invalid value for ICMP type')]
         for pmin, pmax, msg in states: