I got it working, using the realtec.efi driver. It took me some time to realise that the short vendor-class versions take over the later set long ones. Commenting out previous Arch:00007 was necessary.
Now the L3420 doesn’t install anymore, but I know were to look …
class "Legacy" {
    match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
    filename "undionly.kkpxe";
}
class "UEFI-32-2" {
    match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
    filename "i386-efi/snponly.efi";
}
class "UEFI-32-1" {
    match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
    filename "i386-efi/snponly.efi";
}
#class "UEFI-64-1" {
#    match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
#    filename "snponly.efi";
#}
class "UEFI-64-2" {
    match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
    filename "snponly.efi";
}
class "UEFI-64-3" {
    match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
    filename "snponly.efi";
}
#class "SURFACE-PRO-4" {
#    match if substring(option vendor-class-identifier, 0, 32) = "PXEClient:Arch:00007:UNDI:003016";
#    filename "snponly.efi";
#}
class "Apple-Intel-Netboot" {
    match if substring(option vendor-class-identifier, 0, 14) = "AAPLBSDPC/i386";
    option dhcp-parameter-request-list 1,3,17,43,60;
    if (option dhcp-message-type = 8) {
        option vendor-class-identifier "AAPLBSDPC";
        if (substring(option vendor-encapsulated-options, 0, 3) = 01:01:01) {
            # BSDP List
            option vendor-encapsulated-options 01:01:01:04:02:80:00:07:04:81:00:05:2a:09:0D:81:00:05:2a:>
            filename "snponly.efi";
        }
    }
}
class "LATITIDE-3340" {
    match if substring(option vendor-class-identifier, 0, 32) = "PXEClient:Arch:00007:UNDI:003016";
    filename "realtek.efi";
}
