To avoid to lose , all the QoS settings when your traffic is encapsulated into a VPN Tunnel , you can use the command qos pre-classify which will copy automatically bits for a packet’s ToS Byte into ToS byte from the tunnel header. With this you can preserve your QoS settings end-to-end even if you are crossing a VPN Tunnel.