Forgive me if I misunderstood, but why can't you use the existing 'external' profile for this 'SIP Trunk'?
The internal and external don't refer to IP networking, this is about which context the INVITES will be in. External is for trunks who are authenticated via IP ACL, Internal is for...