My comment about trunk to the Watchguard was under my apparently false assumption you had a single physical connection between the switch and the Wathguard. It looks like you have 3 physical connections, so you can forget about trunking.
Gi3/0/13 needs to be as switch port mode access and switchport access vlan 1
Gi3/0/21 needs to be as switch port mode access and switchport access vlan 20
Gi3/0/18 needs to be as switch port mode access and switchport access vlan 10
If a comptuer is supposed to be in VLAN20, then the port it is connected to needs to be:
switch port mode access and switchport access vlan 20