diff --git a/roles/dns-intern/templates/bind/23.172.in-addr.arpa.zone.j2 b/roles/dns-intern/templates/bind/23.172.in-addr.arpa.zone.j2
index 8725b3e..fd6c963 100644
--- a/roles/dns-intern/templates/bind/23.172.in-addr.arpa.zone.j2
+++ b/roles/dns-intern/templates/bind/23.172.in-addr.arpa.zone.j2
@@ -1,7 +1,7 @@
 $ORIGIN 23.172.in-addr.arpa.	; base for unqualified names
 $TTL 1h				; default time-to-live
 @				IN	SOA ns.binary.kitchen. hostmaster.binary.kitchen. (
-					2019021300; serial
+					2019021301; serial
 					1d; refresh
 					2h; retry
 					4w; expire
@@ -11,6 +11,7 @@ $TTL 1h				; default time-to-live
 ; Loopback
 1.0				IN	PTR	core.binary.kitchen.
 2.0				IN	PTR	erx-bk.binary.kitchen.
+3.0				IN	PTR	erx-rz.binary.kitchen.
 ; Management
 1.1				IN	PTR	v2301.core.binary.kitchen.
 11.1				IN	PTR	ups1.binary.kitchen.
@@ -75,5 +76,3 @@ $GENERATE 2-254 $.10		IN	PTR	vpn-${0,3,d}-10.binary.kitchen.
 2.96				IN	PTR	v400.core.binary.kitchen.
 1.97				IN	PTR	vtun1.erx-rz.binary.kitchen.
 2.97				IN	PTR	vtun1.erx-bk.binary.kitchen.
-; Loopback
-4.99				IN	PTR	erx-rz.binary.kitchen.
diff --git a/roles/dns-intern/templates/bind/binary.kitchen.zone.j2 b/roles/dns-intern/templates/bind/binary.kitchen.zone.j2
index d919e1f..7422a21 100644
--- a/roles/dns-intern/templates/bind/binary.kitchen.zone.j2
+++ b/roles/dns-intern/templates/bind/binary.kitchen.zone.j2
@@ -1,7 +1,7 @@
 $ORIGIN binary.kitchen		; base for unqualified names
 $TTL 1h				; default time-to-live
 @				IN	SOA ns.binary.kitchen. hostmaster.binary.kitchen. (
-					2019021300; serial
+					2019021301; serial
 					1d; refresh
 					2h; retry
 					4w; expire
@@ -20,11 +20,12 @@ ldap2				IN	A	172.23.2.4
 ldapm				IN	A	213.166.246.2
 librenms			IN	A	172.23.2.6
 racktables			IN	A	172.23.2.6
-radius1				IN	A	172.23.2.3
-radius2				IN	A	172.23.2.4
+radius				IN	A	172.23.2.3
+radius				IN	A	172.23.2.4
 ; Loopback
 core				IN	A	172.23.0.1
 erx-bk				IN	A	172.23.0.2
+erx-rz				IN	A	172.23.0.3
 ; Management
 v2301.core			IN	A	172.23.1.1
 ups1				IN	A	172.23.1.11
@@ -64,7 +65,7 @@ spiegelei			IN	A	172.23.2.91
 obatzda				IN	A	172.23.2.92
 ; Clients
 v2303.core			IN	A	172.23.3.1
-$GENERATE 1-240 dhcp-${0,3,d}-03	IN	A	172.23.3.$
+$GENERATE 10-240 dhcp-${0,3,d}-03	IN	A	172.23.3.$
 klopi				IN	A	172.23.3.241
 garlic				IN	A	172.23.3.243
 mirror				IN	A	172.23.3.244
@@ -74,7 +75,7 @@ ffrgb				IN	A	172.23.3.249
 ; MQTT
 v2304.core			IN	A	172.23.4.1
 pizza.mqtt			IN	A	172.23.4.6
-$GENERATE 1-240 dhcp-${0,3,d}-04	IN	A	172.23.4.$
+$GENERATE 10-240 dhcp-${0,3,d}-04	IN	A	172.23.4.$
 ; Management RZ
 switch0.erx-rz			IN	A	172.23.9.1
 salat				IN	A	172.23.9.61
@@ -82,11 +83,10 @@ salat-bmc			IN	A	172.23.9.81
 ; Services RZ
 cernunnos			IN	A	172.23.8.23
 ; VPN RZ
+vtun0.erx-rz			IN	A	172.23.10.1
 $GENERATE 2-254 vpn-${0,3,d}-10	IN	A	172.23.10.$
 ; Point-to-Point
 v400.erx-bk			IN	A	172.23.96.1
 v400.core			IN	A	172.23.96.2
 vtun1.erx-rz			IN	A	172.23.97.1
 vtun1.erx-bk			IN	A	172.23.97.2
-; Loopback
-erx-rz				IN	A	172.23.99.4