A.QoS and IPSec should never be used together.
B.IKE/ISAKMP packets are DiffSERV codepoint CS6, so the traffic is never dropped.
C.Source IKE/ISAKMP packets off the loop-back address.
D.Classify IKE/ISAKMP packets so they are appropriately prioritized.