This makes perfect sense now, due to selecting the wrong option (LAN). This is not an on-premise system so the link is invalid, but also selecting LAN in the phone provisioning is equally invalid regardless of the link. It will generate the wrong phone settings for your type of setup.
Based on your Cloud-setup, you have two options that will work as intended:
a) use an SBC ( I highly recommend this - really )
b) use STUN mode ( not recommended - more complicated network setup is required)
The SBC can easily be installed on an existing PC or VM or even a Raspberry Pi, and must be deployed at the same site as the phones. We highly recommend this, it is very robust, quick to deploy, and maintenance free.
STUN does not require extra equipment, but it can be a pain to manage if you have more than a couple of phones (you need firewall access, static IPs, SIP port forwards, RTP port forwards per each phone, not just once) just to keep it stable and reliable in the long term.
Now that you are aware of your choices, let me know which path you prefer and I can guide you.