<VPNProfile>
    <DnsSuffix>example.com</DnsSuffix>
    <NativeProfile>
        <Servers>vpn.example.com</Servers>
        <NativeProtocolType>IKEv2</NativeProtocolType>
        <Authentication>
            <MachineMethod>Certificate</MachineMethod>
        </Authentication>
        <RoutingPolicyType>SplitTunnel</RoutingPolicyType>
        <DisableClassBasedDefaultRoute>true</DisableClassBasedDefaultRoute>
    </NativeProfile>
    <AlwaysOn>true</AlwaysOn>
    <RememberCredentials>true</RememberCredentials>
    <TrustedNetworkDetection>example.com</TrustedNetworkDetection>
    <Route>
        <Address>10.0.0.0</Address>
        <PrefixSize>8</PrefixSize>
    </Route>
    <Route>
        <Address>172.16.0.0</Address>
        <PrefixSize>12</PrefixSize>
    </Route>
    <Route>
        <Address>192.168.0.0</Address>
        <PrefixSize>16</PrefixSize>
    </Route>
    <DomainNameInformation>
        <DomainName>.example.com</DomainName>
        <DnsServers>192.168.1.254</DnsServers>
    </DomainNameInformation>
</VPNProfile>