Sorry folks being stupid! change:
nat on xl1 proto {tcp udp icmp} from 10.190.0.0/16 to any -> 11.11.0.1
to
nat on xl1 proto {tcp udp icmp gre} from 10.190.0.0/16 to any -> 11.11.0.1
of FW1 and
nat on ste0 proto {tcp udp icmp} from 12.12.0.2 to any -> 11.11.0.10
to
nat on ste0 proto {tcp udp icmp gre} from 12.12.0.2 to any -> 11.11.0.10
Solves it.
Foot, mouth, idiot!
