Really is connecting a LTE eNodeB in your network. That device is creating an IPsec vpn tunnel directly from the device to their datacenters and then broadcasting a LTE signal out.

All traffic between the radio and datacenter is tunneled and encrypted.