The present invention discloses methods and systems for managing VPN tunnels. A VPN concentrator establishes a first aggregated VPN connection and a second aggregated VPN connection with a first host and a first network device respectively. When the first aggregated VPN connection comprises a first plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. Similarly, when the second aggregated VPN connection comprise a second plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. The first host encapsulates a first data packet in a first encapsulating packet and transmits the first encapsulating packet to a VPN concentrator using a first aggregated VPN connection. When the VPN concentrator receives the first encapsulating packet, the VPN concentrator decapsulates the first data packet from the first encapsulating packet and encapsulates the first data packet in a second encapsulating packet. The VPN concentrator then transmits the second encapsulating packet to a first network device using a second aggregated VPN connection.