You will need to add the vlan.20 interface to the security zone not the trunk port.
interfaces { ge-0/0/1.0 { ----- remove and replace with vlan.20 host-inbound-traffic { system-services { all; ssh; }
You will need to add the vlan.20 interface to the security zone not the trunk port.
interfaces { ge-0/0/1.0 { ----- remove and replace with vlan.20 host-inbound-traffic { system-services { all; ssh; }