diff --git a/roles/chrony/templates/chrony.conf.j2 b/roles/chrony/templates/chrony.conf.j2
index 96ce222b6c..875b9b29c5 100644
--- a/roles/chrony/templates/chrony.conf.j2
+++ b/roles/chrony/templates/chrony.conf.j2
@@ -30,7 +30,7 @@ minsources 1
 
 # Allow NTP client access from local network.
 {% if ansible_hostname.startswith('bastion') %}
-allow 10.0.0.0/16
+allow 10.0.0.0/8
 {% elif ansible_hostname.startswith('cloud-noc') %}
 allow 209.132.184.0/24
 {% endif %}