Hi,
Could you try by removing the vlan-id from the bridge-domain:
delete bridge-domains bridge-600 vlan-id 600
The idea is to push an outer vlan-id=1 for ingress traffic in ge-0/0/1.600 to enable the QinQ, and pop the outer vlan tag for egress traffic.
Cheers,
Ashvin