Find ingress Ip address

[Juraj Papic]

HI all,

Im connecting via ssh to my router with the ip Address 10.1.5.41, my connection is going to the Loopback 0, I want to know via what Physical Interface I'm  accessing the router. 

When I do "show ip route 10.1.5.41" I don't see this ip in my IP tables ( i don't have any NAT) if I do "show ip cef 10.1.5.41" the output is 0.0.0.0/0 via vlan 10, I  check where vlan 10 is configure and I have it in some trunks.  I need to do this because the customer wants to move some cables and I want to be sure i will not get kicked out from the router.

thanks. 

[MHM Cisco World]

show ip route 10.1.5.41 longest 
give you the next-hop and egress interface, 

show arp ip-address <<- use IP 10.1.5.41

[Juraj Papic]

show arp with the ip address is not showing nothing.  I did show ip cef and it will give my the same output 0.0.0.0/0 via a vlan. 

[MHM Cisco World]

OK, share output (if there is public ip hide it)
show tcp brief all 

[Juraj Papic]

#show tcp brief all
TCB Local Address Foreign Address (state)
03A91B10 cisco1.22 10.1.5.41.59200 ESTAB
03A8DE50 *.* *.* LISTEN
0321AB00 *.443 *.* LISTEN
0321A640 *.80 *.* LISTEN

--

show ip cef 10.1.5.41
0.0.0.0/0
nexthop 10.22.225.5 Vlan225

[MHM Cisco World]

And Yes the 10.1.5.41 is ssh to router

show ip cef 10.1.5.41 detail 

[Juraj Papic]

show ip cef 10.1.5.41 detail
0.0.0.0/0, epoch 1
DefNet source: 0.0.0.0/0
nexthop 10.22.225.5 Vlan225

[Juraj Papic]

After the show ip cef I did

#show ip route 10.22.225.5

--

Routing entry for 10.22.225.0/24
Known via "connected", distance 0, metric 0 (connected, via interface)
Redistributing via rip
Advertised by rip
Routing Descriptor Blocks:
* directly connected, via Vlan225
Route metric is 0, traffic share count is 1

----
#show ip arp | i 10.22.225.5
Internet 10.22.225.5 3 84d4.1259.f012 ARPA Vlan225
---

#show mac address-table | i 84d4.1259.f012
225 84d4.1259.f012 DYNAMIC Gi1/0/46

So if not wrong my connection will come via the Gi1/0/46

[MHM Cisco World]

I late to answer you because as You mention if we decide the g1/0/46 is the egress and then we find that it not you will loss access to SW.
I search about why the mac address not appear, 
finally I get one idea 
the SSH session is UP and you config timeout infinite, there is no traffic between the SSH server and client the TCP UP but the ARP is age out, 

under the SSH config TCP keepalive, 
then check the show arp 

[Juraj Papic]

I did a show arp for the 10.1.5.41 and now showing nothing, I  only see if this is done to the ip address nexthop 10.22.225.5

[MHM Cisco World]

if the 10.1.5.41 next-hop is 10.22.225.5 then 
when we do show ip arp we must see same mac address for both IP.

[Juraj Papic]

No, it only shows the 10.22.225.5