A method and for establishing a virtual private network (VPN) session for a priority request. The method and apparatus includes identifying a priority request from a plurality of VPN session request classes. Reserved bandwidth is allocated to the priority request if a nominally allocated bandwidth is insufficient to satisfy the priority request. Once the allocated bandwidth is assigned, admission control is applied to the priority request.