Qos routeur cisco

Bonjour,
J'ai actuellement un routeur cisco configuré avec avec 7 sites VPN avec des utilisateurs en TSE.
Lorsque qu'un transfert de fichier est réalisé celui-ci prend toute la bande passante et l'utilisation du TSE devient trés difficile.
Je cherche donc a implémenter de la QOS en priorisant le RDP. (Le transfert puisse se faire, même si plus long sans perturbation pour le TSE, si c'est posssible...


Voici ma conf :

!
version 12.3
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname XXXXX
!
boot-start-marker
boot-end-marker

!
enable password XXXXXXXX
!
username XXXXXX password 0 XXXXXXXX
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
aaa new-model
!
!
aaa authentication login userauthen local
aaa authorization network groupauthor local
aaa session-id common
ip subnet-zero
!
!
no ip domain lookup
!
!
ip flow-cache timeout active 1
ip cef
ip audit po max-events 100
no ftp-server write-enable

!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key XXXXXXXXXX address XXXXXXXXXXXXXX
crypto isakmp key XXXXXXXXXX address XXXXXXXXXXXXXX
crypto isakmp key XXXXXXXXXX address XXXXXXXXXXXXXX
crypto isakmp key XXXXXXXXXX address XXXXXXXXXXXXXX
crypto isakmp key XXXXXXXXXX address XXXXXXXXXXXXXX
crypto isakmp key XXXXXXXXXX address XXXXXXXXXXXXXX
crypto isakmp key XXXXXXXXXX address XXXXXXXXXXXXXX
crypto isakmp key XXXXXXXXXX address XXXXXXXXXXXXXX
crypto isakmp key XXXXXXXXXX address XXXXXXXXXXXXXX
!
!
crypto ipsec transform-set myset esp-3des esp-md5-hmac
!
crypto map clientmap 1 ipsec-isakmp
description connected to XXXXXXXXXXXXXX
set peer XXXXXXXXXXXXXX
set transform-set myset
match address 121
crypto map clientmap 2 ipsec-isakmp
description connected to XXXXXXXXXXXXXX
set peer XXXXXXXXXXXXXX
set transform-set myset
match address 122
crypto map clientmap 3 ipsec-isakmp
description connected to XXXXXXXXXXXXXX
set peer XXXXXXXXXXXXXX
set transform-set myset
match address 123
crypto map clientmap 4 ipsec-isakmp
description connected to XXXXXXXXXXXXXX
set peer XXXXXXXXXXXXXX
set transform-set myset
match address 124
crypto map clientmap 5 ipsec-isakmp
description connected to XXXXXXXXXXXXXX
set peer XXXXXXXXXXXXXX
set peer XXXXXXXXXXXXXX
set transform-set myset
match address 125
crypto map clientmap 6 ipsec-isakmp
description connected to XXXXXXXXXXXXXX
set peer XXXXXXXXXXXXXX
set transform-set myset
match address 126
crypto map clientmap 7 ipsec-isakmp
description connected to XXXXXXXXXXXXXX
set peer XXXXXXXXXXXXXX
set transform-set myset
match address 127
!
!
!
interface BRI0
no ip address
shutdown
!
interface FastEthernet0
ip address XXXXXXXXXXXXXX XXXXXXXXXXXXXX
ip nat outside
ip route-cache flow
no ip route-cache cef
no ip mroute-cache
speed 100
full-duplex
no cdp enable
crypto map clientmap
hold-queue 32 in
hold-queue 100 out
!
interface FastEthernet1
no ip address
load-interval 30
no cdp enable
!
interface Vlan1
ip address XXXXXXXXXXXXXX XXXXXXXXXXXXXX secondary
ip address XXXXXXXXXXXXXX XXXXXXXXXXXXXX
ip nat inside
ip route-cache flow
no ip route-cache cef
no ip mroute-cache
hold-queue 100 out
!
ip classless
ip route XXXXXXXXXXXXXX
ip route XXXXXXXXXXXXXX

no ip http server
no ip http secure-server
ip flow-export source Vlan1
ip flow-export version 5
ip flow-export destination XXXXXXXXXXXXXX XXXXXXXXXXXXXX
ip nat inside source list 115 interface FastEthernet0 overload
!
!
!
access-list 115 permit ip XXXXXXXXXXXXXX XXXXXXXXXXXXXX any

access-list 121 permit ip XXXXXXXXXXXXXX

access-list 122 permit ip XXXXXXXXXXXXXX

access-list 123 permit ip XXXXXXXXXXXXXX

access-list 124 permit ip XXXXXXXXXXXXXX

access-list 125 permit ip XXXXXXXXXXXXXX

access-list 126 permit ip XXXXXXXXXXXXXX

access-list 127 permit ip XXXXXXXXXXXXXX

end