Steps
- Enable Allow connections from LAN only on a home or lab network you control, and record the HTTP/SOCKS ports.
- Allow only those ports on the Private network profile in Windows Firewall; avoid an all-networks, all-programs rule.
- On the second device, use the LAN IP of the v2rayN PC and the selected port. Test one site and check host logs.
- Disable LAN listening and remove unused firewall rules afterward. Give the host a stable local address if sharing is ongoing.
Why this matters
Binding to all interfaces allows other devices on the segment to connect. Listener scope, network profile and firewall together form the boundary.
How to verify
Only intended devices on the trusted network connect; the port is unreachable on public Wi-Fi and closes when sharing is disabled.
Things to watch
Shared traffic uses your server quota and identity. Never run an unauthenticated open proxy on a hotel, dorm, office or public network.