With Allow LAN enabled, the Clash instance on your PC becomes a proxy server for the whole network: phones, tablets, TVs and consoles need no extra software - just one proxy address - to inherit the PC's routing.
On the PC
- Enable Allow LAN on the General page.
- Find the PC's LAN IP: run
ipconfigand note the "IPv4 Address" (e.g.192.168.1.100). - Open the firewall: Windows may prompt on first enable - allow on Private networks. If devices cannot connect and no prompt appeared, add Clash for Windows under "Allow an app through the firewall", or create an inbound rule for port 7890.
On each device
| Device | Where | Values |
|---|---|---|
| iPhone / iPad | Wi-Fi → current network → Configure Proxy → Manual | Server 192.168.1.100, port 7890 |
| Android | WLAN → current network → Advanced → Proxy → Manual | Host 192.168.1.100, port 7890 |
| TV / console | Proxy option in network settings | Same (7890 speaks HTTP, which such devices expect) |
Once set, device traffic shows up on the PC's Connections page; rules and node switching are controlled centrally on the PC.
Common issues
- Cannot connect: firewall first; confirm same subnet; corporate/campus AP isolation blocks device-to-device traffic and makes sharing impossible.
- Connected but no internet: check the PC-side node works; make sure
bind-addresshasn't been narrowed to 127.0.0.1. - Drops when the PC sleeps: disable sleep while sharing.
Security: Allow LAN means anyone on the subnet can use your proxy and spend your traffic. On dorm or office networks, add authentication (the authentication field) or enable sharing only when needed. Never on public Wi-Fi.