Chapter 7 The WAN Configuration Screens
User’s Guide
73
In this figure, the dashed arrow shows the PKM (Privacy Key Management) secured
connection between the mobile station and the base station, and the solid arrow shows the EAP
secured connection between the mobile station, the base station and the AAA server. See the
WiMAX security appendix for more details.
Traffic Redirect
Traffic redirect forwards WAN traffic to a backup gateway when the WiMAX Modem cannot
connect to the Internet through its normal gateway. Connect the backup gateway on the WAN
so that the WiMAX Modem still provides firewall protection for the LAN.
Figure 31 Traffic Redirect WAN Setup
IP alias allows you to avoid triangle route security issues when the backup gateway is
connected to the LAN or DMZ. Use IP alias to configure the LAN into two or three logical
networks with the WiMAX Modem itself as the gateway for each LAN network. Put the
protected LAN in one subnet (Subnet 1 in the following figure) and the backup gateway in
another subnet (Subnet 2). Configure a LAN to LAN/WiMAX Modem firewall rule that
forwards packets from the protected LAN (Subnet 1) to the backup gateway (Subnet 2).
Figure 32 Traffic Redirect LAN Setup
