In a multi vCenter Server environment, a Universal Distributed Logical Router (UDLR) with local egress disabled and deployAppliance flag is set to true is created.
This creates a UDLR instance on the secondary without an Edge VM. After a failover, when the secondary becomes the primary and a user adds an Edge VM to the new primary, a user will not be allowed to log in to the Edge appliance as the CLI passwords are not replicated to the secondary NSX Manager.
It is the responsibility of the users to set the CLI password when they add the Edge VM. On a local egress enabled UDLR, users should set the Edge CLI password on the secondary when they add the Edge VM in the secondary UDLR instance. On a local egress disabled UDLR, users should set the Edge CLI password after the failover when a user adds the Edge VM to the new primary UDLR instance.