chromium/chromeos/components/test/data/onc/translation_of_shill_ikev2_cert.onc

{ "GUID": "guid",
  "Type": "VPN",
  "Name": "MyIKEv2VPN",
  "IPAddressConfigType":"DHCP",
  "NameServersConfigType":"DHCP",
  "VPN": {
    "Type": "IPsec",
    "Host": "some.host.org",
    "IPsec": {
      "AuthenticationType": "Cert",
      "ClientCertPKCS11Id": "1:123456abcdef",
      "ClientCertType": "PKCS11Id",
      // This field is part of ONC (and is required). However, it does not
      // exist explicitly in the Shill dictionary. As there is no use-case yet
      // that requires reconstructing this field from a Shill dictionary, we
      // don't translate it.
      // "IKEVersion": 2,
      "LocalIdentity": "local-id",
      "SaveCredentials": true,
      "RemoteIdentity": "remote-id",
    },
  }
}