I've just briefly looked at the config but should't there be a policy from security-zone Internet to security-zone Cameras with "permit tunnel" flags for traffic to flow? As far as I can see you are only allowing dynamic VPN traffic from Internet to Trusted... and cameras are in another security zone.
Let me know if I've missed something obvious - but that's my initial thought on this problem.
