I realize the IPSEC VPN tunnels can not be seen by the firewall engine,
e.g. you can't write ACL rules. But can the tunnel itself (the
connection to the remote VPN concentrator) be seen by the traffic
shaper? I would like to queue and dedicate a good portion of my uplink
to a a vpn tunnel for testing of some IP telephony, if I can guarantee
the tunnel is stable (not encroached upon by other traffic on the
firewall) it would be great.