A packet-centric wireless point to multi-point telecommunications system includes a wireless base station coupled to a first data network; one or more host workstations coupled to the first data network; one or more subscriber customer premise equipment (CPE) stations in wireless communication with the wireless base station over a shared wireless bandwidth using a packet-centric protocol; and one or more subscriber workstations coupled to each of the subscriber CPE stations over a second network; resource allocator optimizing end-user quality of service (QoS) and allocating shared bandwidth among the subscriber CPE stations; a scheduler to schedule an internet protocol (IP) flow over the shared wireless bandwidth. The scheduler includes a prioritizer for prioritizing the IP flow based on priorities of a virtual private network (VPN). The system can include an analyzer for analyzing the virtual private network (VPN) priorities for the IP flow, or for prioritizing all VPN IP flows. The system can include a prioritizer to prioritize the IP flow based on one or more subscriber-defined parameters. In the system, the VPN can include a directory enabled networking (DEN) table management scheme. The VPN can be implemented using a point-to-point tunneling protocol (PPTP). Also included is a method for accomplishing the above.