diff --git a/mikrotik/mt-eg.ke.einsle.de b/mikrotik/mt-eg.ke.einsle.de
index cea0bc7..c34c87c 100644
--- a/mikrotik/mt-eg.ke.einsle.de
+++ b/mikrotik/mt-eg.ke.einsle.de
@@ -14,6 +14,15 @@
 # 
 # Flags: U - undoable, R - redoable, F - floating-undo 
 #   ACTION                                   BY               POLICY             
+# U item changed                             admin            write              
+# U device changed                           admin            write              
+# U item changed                             admin            write              
+# U item changed                             admin            write              
+# U bridge port changed                      admin            write              
+# U device changed                           admin            write              
+# U item added                               admin            write              
+# U item added                               admin            write              
+# U device changed                           admin            write              
 # U filter rule changed                      admin            write              
 # U filter rule added                        admin            write              
 # U filter rule changed                      admin            write              
@@ -34,6 +43,7 @@ add name=br_lan protocol-mode=none vlan-filtering=yes
 /interface ethernet
 set [ find default-name=ether1 ] name=ether1_kg
 set [ find default-name=ether2 ] name=ether2_homematic
+set [ find default-name=ether3 ] name=ether3_raspi
 set [ find default-name=sfp1 ] name=sfp1_kg
 /interface wireless
 # managed by CAPsMAN
@@ -53,18 +63,20 @@ set [ find default=yes ] html-directory=flash/hotspot
 /interface bridge port
 add bridge=br_lan interface=sfp1_kg
 add bridge=br_lan frame-types=admit-only-vlan-tagged interface=ether1_kg
-add bridge=br_lan frame-types=admit-only-untagged-and-priority-tagged interface=ether2_homematic pvid=60
-add bridge=br_lan frame-types=admit-only-untagged-and-priority-tagged interface=ether3 pvid=10
+add bridge=br_lan frame-types=admit-only-untagged-and-priority-tagged interface=ether2_homematic pvid=90
+add bridge=br_lan frame-types=admit-only-untagged-and-priority-tagged interface=ether3_raspi pvid=10
 add bridge=br_lan interface=ether4
 add bridge=br_lan interface=ether5
 /interface bridge vlan
 add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg,vlan1 vlan-ids=1
-add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg,vlan10 untagged=ether3 vlan-ids=10
+add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg,vlan10 untagged=ether3_raspi vlan-ids=10
 add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg,vlan42 vlan-ids=42
 add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg vlan-ids=50
 add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg vlan-ids=51
 add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg vlan-ids=52
-add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg untagged=ether2_homematic vlan-ids=60
+add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg vlan-ids=60
+add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg untagged=ether2_homematic vlan-ids=90
+add bridge=br_lan tagged=br_lan,sfp1_kg,ether1_kg vlan-ids=99
 /interface wireless cap
 # 
 set discovery-interfaces=vlan1 enabled=yes interfaces=wlan1,wlan2
@@ -93,3 +105,5 @@ set name=mt-eg
 set enabled=yes primary-ntp=172.24.10.11 secondary-ntp=172.24.10.12
 /tool romon
 set enabled=yes id=6C:3B:6B:19:62:AD secrets=78f244b59c
+/tool sniffer
+set filter-interface=ether2_homematic