A couple of thoughts/test cases you can do:
check if arp-entries are showing to pin point if it's related to security or basic switching infrastructure.
Have you assigned the irb's to the vlans and are they showing as up/up and routes present on both boxes for the subnet configured?
