diff --git a/modules/rhizo_base/files/etc/freeswitch/autoload_configs/acl.conf.xml b/modules/rhizo_base/files/etc/freeswitch/autoload_configs/acl.conf.xml
index 1097186..33ae0ff 100644
--- a/modules/rhizo_base/files/etc/freeswitch/autoload_configs/acl.conf.xml
+++ b/modules/rhizo_base/files/etc/freeswitch/autoload_configs/acl.conf.xml
@@ -24,7 +24,7 @@
     <list name="domains" default="deny">
       <!-- domain= is special it scans the domain from the directory to build the ACL -->
       <!--<node type="allow" domain="$${domain}"/> -->
-      <node type="allow" cidr="192.168.0.0/24"/>
+      <node type="allow" cidr="192.168.11.0/24"/>
       <node type="allow" cidr="10.23.0.0/16"/>
       <node type="allow" cidr="172.16.0.0/16"/>
       <node type="allow" cidr="127.0.0.1/32"/>
diff --git a/modules/rhizo_base/files/etc/freeswitch/sip_profiles/lan.xml b/modules/rhizo_base/files/etc/freeswitch/sip_profiles/lan.xml
new file mode 100644
index 0000000..959fa2d
--- /dev/null
+++ b/modules/rhizo_base/files/etc/freeswitch/sip_profiles/lan.xml
@@ -0,0 +1,58 @@
+<profile name="lan">
+
+  <domains>
+    <domain name="all" alias="true" parse="false"/>
+  </domains>
+
+  <settings>
+    <param name="debug" value="0"/>
+    <param name="sip-trace" value="no"/>
+    <param name="sip-capture" value="no"/>
+    <param name="liberal-dtmf" value="true"/>
+
+    <param name="watchdog-enabled" value="no"/>
+    <param name="watchdog-step-timeout" value="30000"/>
+    <param name="watchdog-event-timeout" value="30000"/>
+
+    <param name="log-auth-failures" value="false"/>
+    <param name="forward-unsolicited-mwi-notify" value="false"/>
+
+    <param name="context" value="public"/>
+    <param name="rfc2833-pt" value="101"/>
+    <param name="sip-port" value="$${internal_sip_port}"/>
+    <param name="dialplan" value="XML"/>
+    <param name="dtmf-duration" value="2000"/>
+    <param name="inbound-codec-prefs" value="$${global_codec_prefs}"/>
+    <param name="outbound-codec-prefs" value="$${global_codec_prefs}"/>
+    <param name="rtp-timer-name" value="soft"/>
+    <param name="rtp-ip" value="$${external_ip}"/>
+    <param name="sip-ip" value="$${external_ip}"/>
+    <param name="aggressive-nat-detection" value="false"/>
+    <param name="apply-inbound-acl" value="domains"/>
+    <param name="apply-register-acl" value="domains"/>    
+    <param name="local-network-acl" value="localnet.auto"/>
+    <param name="record-path" value="$${recordings_dir}"/>
+    <param name="record-template" value="${caller_id_number}.${target_domain}.${strftime(%Y-%m-%d-%H-%M-%S)}.wav"/>
+    <param name="manage-presence" value="false"/>
+    <param name="presence-hosts" value="$${domain},$${external_ip}"/>
+    <param name="presence-privacy" value="$${presence_privacy}"/>
+    <param name="inbound-codec-negotiation" value="generous"/>
+    <param name="rtp-rewrite-timestamps" value="true"/>
+    <param name="inbound-late-negotiation" value="true"/>
+    <param name="inbound-zrtp-passthru" value="true"/>
+    <param name="nonce-ttl" value="60"/>
+    <!--<param name="disable-transcoding" value="true"/>-->
+    <param name="auth-calls" value="$${internal_auth_calls}"/>
+    <param name="inbound-reg-force-matching-username" value="true"/>
+    <param name="auth-all-packets" value="false"/>
+    <param name="ext-rtp-ip" value="$${external_ip}"/>
+    <param name="ext-sip-ip" value="$${external_ip}"/>
+    <param name="rtp-timeout-sec" value="300"/>
+    <param name="rtp-hold-timeout-sec" value="1800"/>
+    <param name="force-register-domain" value="$${domain}"/>
+    <param name="force-subscription-domain" value="$${domain}"/>
+    <param name="force-register-db-domain" value="$${domain}"/>
+    <param name="challenge-realm" value="auto_from"/>
+
+  </settings>
+</profile>