Try configuring the local identity on both sides as below:
set security ike gateway GW-NAME local-identity inet 192.168.1.1 --> The initial private IP you have used on external inetrafces
if that dont help please use below on both sides.
set security ike gateway GW-NAME general-ikeid
Regarding VLANs, below URLs may be helpfull.
https://kb.juniper.net/InfoCenter/index?page=content&id=KB16667&actp=search
http://forums.juniper.net/t5/SRX-Services-Gateway/SRX-100-Vlan-configuration/td-p/230279