Chrony and ipv6

[RamSense]

I have Crony as NTP on opnsense.
as Allowed Networks I have 192.168.1.0/24 (my lan opnsense ip is 192.168.1.1)
and when i type in terminal on my MacBook sntp 192.168.1.1 -> the result is:
+0.025679 +/- 0.008483 192.168.1.1 192.168.1.1

Now I have IPv6 enabled on opnsense/my network. my lan ipv6 is 2001:1c04:4213:xxx:xxxx:xxxx:xxxx:xxxx/64
I added Allowed Networks 2001:1c04:4213:xxx::1/64
and when i type in terminal on my MacBook sntp 2001:1c04:4213:xxx:xxxx:xxxx:xxxx:xxxx -> the result is:
sntp: Exchange failed: DNS lookup failure
xxxx
xxx
sntp: Clock select failed

I also tried Allowed Networks 2001:1c04:4213:xxx::1 and 2001:1c04:4213:xxx::0/64

All gave the same result clock select failed. How to configure this correctly for Chrony and ipv6?

[koushun]

Does your IPv6 network resolve IPv6 hosts? Does IPv6 even work?

I know nothing about IPv6; but it looks as it cannot resolve?

Code Select Expand

ping -a google.com -6

Code Select Expand

dig -6 google.com

What happens if you try some of these servers listed here: https://linuxreviews.org/IPv6-listening_NTP_servers

https://serverfault.com/questions/951752/ntp-and-ntpdate-over-ipv6-does-not-work

:o :o

[RamSense]

Thank you for your links and info.

Ping google works, dig works and ipv6 works on my network.
I believe it has to do with my chrony config.
I know the lan IPv4 way of writing for chrony for Allowed Networks what is 192.168.1.0/24 for my opnsense lan 192.168.1.1

But I do not know the IPV6 way of writing for Allowed Networks. I tried 2001:1c04:4213:xxx::1/64 and 2001:1c04:4213:xxx::/64 etc that did not work.

So hoping to hear the right way of writing the Allowed Networks for IPv6.

NB I just found this guide: https://docs.fedoraproject.org/en-US/Fedora/18/html/System_Administrators_Guide/sect-Understanding_the_chrony_configuration_commands.html
tried 2001:1c04::/32, but same result.