Yeah, +1 for what catcamstar said.
Anyway, I bought one VTO2111D-WP myself and what I noticed is that when you cut off the doorbell from the internet (leaving full local network connectivity with an android phone), all works fine except calling to gDMSS app. I checked the network traffic being generated when button is pushed and VTO is knocking to fcm.googleapis.com (it's something called Firebase Cloud Messaging - found this link for docs:
REST Resource: projects.messages | Firebase ). (Un)fortunately it talks over SSL, so couldn't get into the data which are being exchanged.
Once you open this traffic, calling to the mobile phone works just fine (even on VPN in my case). Any ideas about the purpose of that?
By the way, I read through the topics about VTO2111D-WP here and I've got an impression to not touch firmware on the unit. Is it really not recommended to update the firmware?
---edit---
I think this communication is for ringing the gDMSS app via Dahua service. When P2P is not enabled, VTO2111D-WP calls dahua infra via Google API and this infra is calling gDMSS app. Then, gDMSS app initializes communication to the doorbell. Thanks to that, you don't need to open up firewall both ways, it just needs to be opened from gDMSS to VTO2111D-WP. Of course this is just my assumption, but after checking the network traffic to and from VTO this scenario comes to my mind.