ZyXEL Communications MAX-306, User Manual, Page: 91 / 405

Chapter 7 The WAN Configuration Screens
User’s Guide
91
Authentication
When authenticating a user, the base station uses a third-party RADIUS or
Diameter server known as an AAA (Authentication, Authorization and Accounting)
server to authenticate the mobile or subscriber stations.
The following figure shows a base station using an AAA server to authenticate
mobile station MS, allowing it to access the Internet.
Figure 32 Using an AAA Server
In this figure, the dashed arrow shows the PKM (Privacy Key Management)
secured connection between the mobile station and the base station, and the solid
arrow shows the EAP secured connection between the mobile station, the base
station and the AAA server. See the WiMAX security appendix for more details.
Traffic Redirect
Traffic redirect forwards WAN traffic to a backup gateway when the WiMAX Device
cannot connect to the Internet through its normal gateway. Connect the backup
gateway on the WAN so that the WiMAX Device still provides firewall protection for
the LAN.
Figure 33 Traffic Redirect WAN Setup
IP alias allows you to avoid triangle route security issues when the backup
gateway is connected to the LAN or DMZ. Use IP alias to configure the LAN into