IPSEC can add up to 52 bytes per packet of overhead, but in my opinion, it's a waste of brain cells to try to calculate your exact bandwidth requirements based on this. Whatever bandwidth you can get, the VPN overhead will be least of your worries. I would figure 6-8% overhead for encryption.
