Traffic Shaping

Is there any way to shape traffic passed through an IPSEC tunnel?

Main office  ->  Remote Office
VNC from 192.168.1.x -> m0n0wall -> IPSEC -> Internet -> IPSEC -> m0n0wall -> 192.168.168.x

The problem is when I do this my Upload on my remote office gets dragged down and trashs the IP phones.  I can shape the traffic if I use the public IP address and forward ports accordingly, but then I have to have open ports.....

Any thoughts?

Hi, im new to the forum.

I do all my traffic shaping on the LAN interface rather than the WAN interface which makes it work with IPSEC.

Remember to think about the in/out direction though according to the "point of view" of the LAN interface.

Hope this helps

Matt