That's not the full config, so we can't tell you what's missing... though since it's an ER-X, check if "hwnat" offload is enabled. If not, enable it.
This command should do it for you:
set system offload hwnat enable
If you're a GUI guy, the setting is likely in the config tree.