While I would still like to know if it is possible to do this in a more correct way… I realized an answer for my problem right at the end of typing this. Since the vpn is used just for voip and voip uses the same outgoing and incoming bandwidth (approximately), it will be fine to put a max and guaranteed bandwidth on the DEFAULT class (which is automatically placed for eth0 and eth1)