01

Turning this on makes your PC a proxy server

The allow LAN connections switch does one thing: it moves the mixed port from listening on 127.0.0.1 only to listening on every network interface. After that, any phone, TV or console on the same subnet can point at your computer and use it as a proxy.

The upside is that you stop installing a client on every device. The cost is that the port asks for no password, so anyone who reaches your subnet and knows the address rides your line for free.

Do not enable this on shared networks
Dorm, hotel and coworking Wi-Fi put you on one segment with strangers.

SponsoredWhere does the subscription link come from?Our partner provider gives you 1 GB of high-speed Hong Kong data at signup — import it in one click.Get high-speed nodes
02

Getting a phone or a TV to use it

  1. 1

    Turn the switch on and note the port

    Open Settings and enable the LAN connection switch; the label shifts a little between versions. Devices connect to the mixed port, which is 7897 on current builds and still 7890 in profiles carried over from older ones.

  2. 2

    Find the address and enter it on the device

    Run ipconfig on Windows and take the IPv4 address, usually starting with 192.168 or 10. On the phone, long press the Wi-Fi network, edit it, set the proxy to manual, then enter that address with the mixed port beside it. DHCP can change it after a router reboot, so reserve it in the router panel.

  3. 3

    Let it through the firewall

    The first time the core listens on an external address, Windows asks which networks the app may use, and only the private network box matters. If you missed that prompt, find Clash Verge in the allowed apps list of Windows Defender Firewall and tick the private column.

03

The bypass list and what belongs in it

The other half of this page is the bypass field: destinations separated by semicolons that skip the proxy and leave over the local network. localhost, 127.*, 10.*, 192.168.* and <local> are already there, the last one meaning a host name with no domain suffix. Add intranet domains, the NAS and the printer page yourself.

  • Any response from the address and port on the phone means it is reachable
  • A router page that will not load is a subnet missing from this field
  • After editing, switch the system proxy off and on so the entries reach the system
04

Common questions

The phone has the address and the port, but nothing loads. What now?

Three checks in order. Ping the phone from the computer: no reply means the devices are not on the same segment, which guest networks and AP isolation both cause. If the ping works, it is the firewall, and the private network column is what to look at. If both are fine, recheck the port number.

Can someone else on the network use my proxy?

Yes. The port accepts whatever reaches it and asks for no password. At home the risk is small; in an office or a dorm it is real. Switch it off when you are done, or add an inbound firewall rule that allows only your own devices.