once I added irb.10 and irb.20 to security zone trust it work. Problem is, do not want both of these to be in the trust zone.
One is for guest Wi-Fi and I do not want them able to see our network.
root@HSRX300# show security zones security-zone trust address-book { address RMI-Server xxx.xxx.xxx.xxx/32; address Security-Cameras xxx.xxx.xxx.xxx/32; } host-inbound-traffic { system-services { all; } protocols { all; bgp; } } interfaces { ge-0/0/1.0; ge-0/0/2.0; ge-0/0/3.0; ge-0/0/4.0; st0.1; st0.2; irb.10; irb.20;