vpn bandwidth is not enough

[ventte]

Our company uses N7K as our core switch, and all subcompany link to this N7K through MPLS-VPN. But VPN bandwidth is not enough for video meeting, QA etc, so we need to do QoS, the deviceS of our subcompanies are 2811 routers(bought from 3anetwork website), and configuration like:

policy-map QOS-OUT
class CLASS-VOIP
priority 1500
set dscp ef
class CLASS-OA
bandwidth 1000
random-detect dscp-based
set dscp af31
shape average 1000000
class class-default
fair-queue
random-detect dscp-based
shape average 1000000

It’s too hard to do this similar configuration for N7K, there is no configuration file can be found and office configuration files are not compete. I tried many times and the result is priority and bandwidth can’t be realized at the same time on one policy-map. Here is configuration about QoS on N7K.
policy-map type queuing QOS-OUT
class type queuing 1p3q4t-out-pq1
priority level 1 // Whether all of the bandwidth will be taken up when the bandwidth can’t be used and the bandwidth limitation can’t be realized.
class type queuing 1p3q4t-out-q3
bandwidth remaining percent 20 //can’t run bandwidth command, or debug assertion failed
queue-limit 10 mbytes
random-detect cos-based // here is there any problem of queue-limit?
class type queuing 1p3q4t-out-q-default
bandwidth remaining percent 10
queue-limit 20 mbytes
random-detect cos-based

Plus：
when user-defined class-map type queuing match-any my-1p2q4t-out-pq1, match just supports to be followed by class-map and cos, not dscp, and the class-map with any following setup class-maps would be reported error.