diff --git a/roles/ipt-server/MIGRATION.md b/roles/ipt-server/MIGRATION.md
index 17e32f6..92fd445 100644
--- a/roles/ipt-server/MIGRATION.md
+++ b/roles/ipt-server/MIGRATION.md
@@ -138,10 +138,10 @@ ansible-playbook ipt-server.yml --limit ${HOSTNAME}
 **Verifizieren:** Jetzt die neuen Rules mit dem gesicherten Stand vergleichen:
 
 ```bash
-ssh ${HOSTNAME} '
-  iptables-save  | grep -v "^#" | sed "s/\[[0-9]*:[0-9]*\]/[0:0]/g" \
+ssh -t ${HOSTNAME} '
+  sudo iptables-save  | grep -v "^#" | sed "s/\[[0-9]*:[0-9]*\]/[0:0]/g" \
     > /tmp/fw_after_v4.rules
-  ip6tables-save | grep -v "^#" | sed "s/\[[0-9]*:[0-9]*\]/[0:0]/g" \
+  sudo ip6tables-save | grep -v "^#" | sed "s/\[[0-9]*:[0-9]*\]/[0:0]/g" \
     > /tmp/fw_after_v6.rules
   echo "=== IPv4 diff ==="
   diff /tmp/fw_before_v4.rules /tmp/fw_after_v4.rules