The 1st tracert originated from my PC which connects to a 4507 (172.17.3.1). Hop 1, trace packet hits 4507 then onto hop 2 (172.17.65.17) 6509 layer 3 ports that is connected directly to 4507 layer 3 ports. Hop 3 is the firewall.

2nd trace originated from the same 4507 that my PC is connected to. Hop 1 is layer 3 port on 6509 (172.17.65.21) at this point, I would expect hop 2 is the firewall but instead it hits a SVI on the 6509 (172.17.1.2) before it routed to the firewall.

Can someone explain?

H:\>tracert cisco.com

Tracing route to cisco.com [198.133.219.25]

over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 172.17.3.1

2 <1 ms <1 ms <1 ms 172.17.65.17

3 * * * Request timed out.

4 * * * Request timed out.

5 * * * Request timed out.

6 * * * Request timed out.

7 * * * Request timed out.

8 * * * Request timed out.

9 * * * Request timed out.

10 * * * Request timed out.

4507-15630#trace 198.133.219.25

Type escape sequence to abort.

Tracing the route to 198.133.219.25

1 172.17.65.21 0 msec

172.17.65.17 0 msec

172.17.65.21 0 msec

2 *

172.17.1.2 0 msec *

3 * * *

4 * * *

5 * * *

6 * * *

7 * * *

8 * * *

9 * * *

10 * * *