I am just warning you that if your ISP got you behind CGNAT, the VPN server won't work unless you have private IP address. With my last ISP before moving out it was working even with public IP (not behind CGNAT) with Archer router.

I ended up solving it myself with the help of Tailscale as I refuse to pay for private IP so at the end I didn't have to buy more expensive deco model just for the VPN server functionality.

  @Josef69 Good point, but I'm more interested in the VPN client than the server feature since I have a NordVPN subscription. I just need the usual and bare minimum coverage/protection that an off the shelf VPN service can provide for my entire home network. 

  @_kukurikapoo I am having the same issue! Has anybody resolved this yet? 

Does any one know if you stop using the X50-DSL as a modemand you change the operation mode from DSL Modem Router to WI-Fi Router you then get the options for VPN.

I'm switching from Sky FTTC to Virgin Media Full Fibre so wont need the DSL modem feature.

If not then I'm assuming I would I be ok swapping my main X50-DSL over with one of my other two standard none DSL X50 currently set up as mesh wifi extenders on Ethernet back haul.  Then reconfigure that one to be the primary wifi router for doing the DHCP etc.  Then plug a cable from wan port into the Virgin media hub with that set that to modem only mode.