We found the problem, they where not using the straight port forwarding, so the port numbers shown in the Radio RRC where from the outside forwarded to an other RRC used for a TS-480 with different password.
Conclusion, USE STRAIGHT PORT FORWARDING to avoid confusion.
73 de mike