diff --git a/vyos/gw01/config.boot.tmpl b/vyos/gw01/config.boot.tmpl
index 05e0511..0fc14db 100644
--- a/vyos/gw01/config.boot.tmpl
+++ b/vyos/gw01/config.boot.tmpl
@@ -253,6 +253,14 @@ firewall {
                 }
                 protocol udp
             }
+            rule 60 {
+                action accept
+                description "Allow NTP"
+                destination {
+                    port 123
+                }
+                protocol udp
+            }
         }
         name OOB_FORWARD {
             default-action drop
@@ -300,6 +308,14 @@ firewall {
                 }
                 protocol udp
             }
+            rule 60 {
+                action accept
+                description "Allow NTP"
+                destination {
+                    port 123
+                }
+                protocol udp
+            }
         }
         name SANDBOX_FORWARD {
             default-action drop