Allow LAN Connections in v2rayN: Share Your PC Proxy with Phones and TVs

1. What LAN Proxy Sharing Does

Allowing connections from the LAN changes which devices can reach the proxy listener. An endpoint that was previously available only to the PC can now accept connections from other devices on the same local network. A phone or TV sends supported requests through the PC, where the active v2rayN core applies its routing rules to decide whether to connect directly or use a proxy.

This does not turn your PC into a router or share all of its network traffic. Android’s manual Wi-Fi proxy setting usually uses an HTTP proxy. Apps that follow the system proxy, such as browsers, can use it, but some video apps, games, and apps that open their own connections may ignore it. An HTTP proxy also does not automatically carry all UDP traffic from the device.

• Make sure the PC can access the destination service through v2rayN before setting up LAN sharing.
• The PC and phone must be on a home network that allows them to communicate. Using Wi-Fi with the same name does not guarantee that devices can reach each other.
• Keep the PC powered on, connected to the network, and running the core. Other devices will lose their proxy connection if the PC goes to sleep.
• You don’t need to enable TUN for proxy sharing. “Set system proxy” mainly affects the PC itself; it does not enable a LAN listener.

2. Find the PC’s IP Address and HTTP Proxy Port

In Windows Terminal, run ipconfig. Find the active “Wireless LAN adapter WLAN” or Ethernet adapter, then note its IPv4 address and subnet mask. Don’t use a virtual or disconnected adapter, and don’t mistake the default gateway for the proxy server.

ipconfig

Example:
IPv4 address       192.168.1.23
Subnet mask        255.255.255.0
Default gateway    192.168.1.1

In this example, enter 192.168.1.23 as the server on your phone—not the router address 192.168.1.1 or 127.0.0.1. The latter always refers to the device you’re using. Entering it on your phone would make it try to connect to itself.

Depending on the version and core configuration, v2rayN may provide separate HTTP and SOCKS listeners or a mixed listener. Don’t assume the example ports above are defaults. Go to Settings → Parameters and check the local listener fields, then confirm the actual HTTP or mixed port in the logs. For Android Wi-Fi, enter a port that accepts HTTP proxy connections—not a SOCKS-only port.

3. Allow LAN Connections and Check the Listener

1. In v2rayN, select a configuration you’ve verified works and make sure the core is running properly.
2. Go to Settings → Parameters and look for “Allow connections from the LAN.” The setting may be grouped differently in different versions, so check the options on your screen.
3. Enable the option and save your changes, then restart the core if prompted. If there’s a separate bind address setting, allow connections on the LAN address rather than binding only to the loopback address.
4. In PowerShell, check the target port to confirm the change is active in the running process.

Get-NetTCPConnection -State Listen -LocalPort 10809 |
  Select-Object LocalAddress, LocalPort, OwningProcess

If the listener is bound only to 127.0.0.1, other devices can’t reach it over IPv4 LAN. 0.0.0.0 usually means listening on all local IPv4 addresses; 192.168.1.23 means listening on that specific adapter address. If you see only ::, don’t assume IPv4 is reachable—test from another device.

If the command returns no results, check the v2rayN logs for a port conflict or startup failure, then verify the listener port. Don’t keep changing phone settings to troubleshoot a listener that isn’t running on the PC.

4. Allow Limited Access Through Windows Firewall

If the listener is working but your phone times out, check the firewall next. On a trusted home network, you can use the “Private” network profile. Don’t switch a hotel or public hotspot to Private just to share a proxy. In Windows, go to Settings → Network & Internet, open the properties for your current connection, and check its network profile.

Run the command below in an administrator PowerShell window. It applies to the example TCP port in this guide and allows access from the local subnet only on the Private profile. If a broader app-allow rule already exists, review it too—a new, narrower rule won’t restrict an existing rule.

New-NetFirewallRule `
  -DisplayName "v2rayN LAN HTTP 10809" `
  -Direction Inbound `
  -Action Allow `
  -Protocol TCP `
  -LocalPort 10809 `
  -RemoteAddress LocalSubnet `
  -Profile Private

• Replace 10809 with the actual HTTP or mixed listener port, and update the rule’s display name to match.
• LocalSubnet restricts access to the local subnet, not to a specific phone. If your PC has multiple network adapters, consider specifying the local address or a narrower source subnet.
• Don’t turn off the firewall. If your security software has its own network protection, check the relevant rules there too.
• If your phone is on a guest network or isolated VLAN, allowing the port through the firewall won’t override the router’s rules for communication between network segments.

When you no longer need sharing, delete the rule you added and turn off LAN connections in v2rayN. This removes both the Windows Firewall exception and the app’s LAN listener.

Remove-NetFirewallRule -DisplayName "v2rayN LAN HTTP 10809"

5. Set Up the Proxy on an Android Phone or TV

On Android, go to Settings → Wi-Fi or Network & Internet, select the connected network, and choose Edit network. Under advanced options, set Proxy to Manual. Menu names vary by manufacturer, but the key fields are the same: server hostname, port, and an optional bypass list.

After saving, use a browser to open an HTTPS page that normally requires the proxy. An HTTP proxy can create an HTTPS tunnel with CONNECT; that doesn’t downgrade the page to plain HTTP. While testing, check the connection logs on the PC to confirm the request reached the proxy listener.

1. If your TV supports manual network proxy settings, enter the same address and port in the advanced settings for the connected Wi-Fi network.
2. If the TV is connected over Ethernet, check whether its wired network settings offer a proxy option. Wi-Fi proxy settings don’t automatically apply to wired connections.
3. If a TV app doesn’t follow the system proxy, setting a network proxy won’t force its traffic through it. First check whether the app has its own proxy settings.
4. If you need a standalone proxy client on the device, you can use v2rayNG or v2flyNG. These clients use their own configurations; they don’t simply reuse the HTTP proxy settings in this guide.

v2rayNG uses the Xray core, while v2flyNG uses the v2fly core. If you switch to a standalone client, check subscription compatibility, routing, and DNS settings again. Don’t assume it will inherit the rules configured on your PC.

6. Test in Three Stages: Port or Node Issue?

Test in this order: local proxy listener, LAN reachability, then the destination service. A browser error only tells you the request failed; it doesn’t prove that the subscription, node, or firewall is at fault.

1. Test the local proxy: Run the first command below on the PC sharing the proxy to check that the HTTP listener can handle requests. If it fails, troubleshoot the core or outbound connection first.
2. Test LAN connectivity: Run the second command on another Windows device on the same network. TcpTestSucceeded returning True confirms only that the TCP port is reachable—not that the proxy protocol or outbound connection works.
3. Test an app request: Save the proxy settings on your phone, visit the destination page, and check the PC logs for the time, destination, and source address. Confirm both that the page loads and that the request appears in the logs.

# Test the HTTP proxy listener on the PC sharing the proxy
curl.exe --proxy http://127.0.0.1:10809 --connect-timeout 10 -I https://v2rayzip.com/

# Test LAN TCP connectivity from another Windows device
Test-NetConnection -ComputerName 192.168.1.23 -Port 10809

The response status from the first command isn’t necessarily 200. A redirect or a site that rejects HEAD requests may return another status, so check whether the connection was established and review the logs. If the listener is bound only to the LAN address and not the loopback address, use the PC’s LAN address in the first command.

7. Keep the Address Stable and Limit Sharing

Reliable sharing depends on keeping the address, listener, and network state consistent. Use your router’s DHCP reservation instead of assigning the PC a random static address that might conflict with another device. Check the PC’s sleep settings too: turning off the display doesn’t mean the PC is asleep, but it must remain running to handle connections from other devices.

• Routing is still controlled by the PC: Requests from your phone are still subject to the rules configured in v2rayN. LAN traffic isn’t automatically sent through the proxy.
• Successful sharing doesn’t confirm DNS behavior: HTTP CONNECT may pass the destination hostname to the proxy, but the app’s own DNS lookups, encrypted DNS, and connections that bypass the proxy need to be checked separately.
• Update the address when it changes: After changing networks, switching adapters, or replacing the router, recheck the PC’s address, network profile, and firewall scope.
• Turn off the listener before leaving your home network: Disable LAN sharing and remove any firewall rules you no longer need. Restore the proxy settings on any borrowed device after testing.