Sorry folks being stupid! change:
nat on xl1 proto {tcp udp icmp} from 10.190.0.0/16 to any -> 11.11.0.1 to nat on xl1 proto {tcp udp icmp gre} from 10.190.0.0/16 to any -> 11.11.0.1 of FW1 and nat on ste0 proto {tcp udp icmp} from 12.12.0.2 to any -> 11.11.0.10 to nat on ste0 proto {tcp udp icmp gre} from 12.12.0.2 to any -> 11.11.0.10 Solves it. Foot, mouth, idiot!