I've a host in the same subnet as the Concentrator's public interface. When the packet is decrypted, would it route out to the public interface since the host is on the same subnet as the concentrator's public interface? Would the concentrator ignore...

Does all IOS support the above? Do I need to look for the feature set that support it? Which version and above uses this command "crypto key pubkey-chain dss" and which version and below uses the old command "crypto public-key"