You only need to apply QoS on ETH01 interface, which is the WAN.
traffic in VPN has to be matched on interface VPN00, not on ETH01. On ETH01 you need to classify the traffic of UDP/1194 which is the VPN itself. If you need more help paste here a screenshot of your config.