Each phone keeps a single exit. The host, port, and protocol of that exit go in the soft-router rule that forwards by LAN IP, and they are copied onto a sheet. If the sheet and the rule disagree, later checks have nothing to compare against.
One row, one phone
The sheet needs at least these columns:
| Column | What to write |
|---|---|
| Device | A name or device ID. Leave the whole batch unnamed as iPhone |
| LAN IP | The address the router reserves for this phone, for example .21 |
| Proxy | Host, port, protocol |
| Node note | A line name you recognize |
| Check date | The last date you opened the check page on the phone |
The phone joins the Wi-Fi that this soft router broadcasts. The router gives each phone a DHCP reservation so the MAC and the LAN IP stay bound. In mwan3 or PassWall, .21 points only at node A, and .22 points only at node B. The phone needs no jailbreak, and it needs no extra app for this job.
After the rules change, open the check page on that phone and see whether the exit IP is the node on that row. A browser on the control PC measures the computer own exit.
Two columns that get missed: disconnects and omissions
When Socks5 drops, the system may switch to a direct connection, and the exit becomes the office or home broadband. On the router, set that LAN IP to refuse forwarding: if the proxy is gone, that phone goes offline. Add a Disconnect policy column to the ledger and write that direct connection is already refused, so the node is remembered and the fallback is remembered with it.
Look at IPv6 on its own. If the proxy only carries IPv4, a phone on Wi-Fi can still leave over IPv6. If the IPv6 on the check page disagrees with the node, turn off IPv6 assignment for this address range on the router, or have the node forward IPv6 as well, test once more, and write the result back on the same row.
Write DNS down too. The phone uses the DNS the router hands out by default. If DNS lands on the local carrier while the exit IP is somewhere else, the row is incomplete. Change it to DNS in the same region as the exit, or use DoH/DoT, and put the DNS actually in use into the note.
The offline activator does not write these columns. It handles the device ID, the disk image, pairing, and the self-activation test. External VPN mode only requires LocalDevVpn to be installed at test time. The proxy host and port still follow the router rules and this sheet.
About EasyClick: A mobile automation script development platform covering three phone ecosystems: Android without root, iOS without jailbreak, and HarmonyOS. It also offers Apple script writing, Apple cluster control, Android cluster control, remote cloud control, and AI phone cluster control. → Explore all products · iOS cluster control product site
Ready to build it for real?
Every approach in this article can be built with EasyClick capabilities on iEasyClick — full documentation, developer tools and automation products, free to try.