As ingenium says, the Airave4 makes two VPN tunnels to the Sprint servers, all traffic goes via these two tunnels. One tunnel for CDMA 1x Voice/data and one for LTE data.
No ports needs to opened/forwarded/No DMZ.
Do NOT use DMZ, unless you really enjoy opening up your network to attacks.