Does not look like thats possible. The Juniper does not like it;

[edit interfaces ge-0/0/0]
'unit 0'
VLAN-ID must be specified on tagged ethernet interfaces
error: configuration check-out failed

Back to the drawing board.

I got setup draytek vigor 2760 in bridge wit asus rt-ax88u, and vlan tag is done by draytek (can be done by asus as well but asus is set to authenticate connection with login details) , I know from previous experience that if vlan tag was done on booth there was no internet connection. However on your draytek may be an option for full bridge, if there is then disable vlan 101 on draytek and let juniper do vlan tag 101 for all outgoing connections. In theory vlan tag 101 should be done by modem so there is no issues with inertnet connection from router point, so router only authenticate connection with login details.

Update - grabbed a Vigor 130 and put that between the 2862 and the SRX - did not work.

Removed vlan-tagging and vlan101 from the Juniper and it does now work :mrgreen:

Update

---

Vigor 130 works fine.

Draytek 2862 - does not work.

I question if there are other settings that need to be changed on this device and have emailed Draytek directly for support.