You will need to have routes across the tunnel at both ends to be able to return traffic. If you see ICMP traffic going in and nothing on the other side, then it is possible that the return route is missing.
Use traceroute to find out where the connection is stopping or if the packets are bouncing back and forth.
ACL 102 has a typo : access-list 102 deny ip 192.168.10.0 0.0.0.255 <b>192.168.11.0</b> 0.0.0.255
Also, use ‘show crypto ipsec sa’ to see if packets are being encrypted and decrypted.
If you are pinging from the Cisco router you will need to source your pings from VLAN 1 or the ping will fail. Best to just connect from a connected host.