How to restrict access to the IPTV service for a client?

Question

Cisco

Good afternoon! I represent a small provider, recently decided to provide customers with IPTV service. In this connection, I would like to know the opinion of more experienced colleagues on the topic of restricting access to TV channels.
There are access switches Cisco 2960, aggregation 3750, core ASR 1006. Billing - BGBilling 6.0.
While I see the following options:
1) PIM + IGMP Filter on the client port. Write a script that will check the means in billing and hang the IGMP Filter on the port.
2) MVR. Similar to the previous one, only mvr receiver will be indicated on the client port.
3) CAS. Encrypt multicast streams, but this requires, as I understand it, set-top boxes and players that can decrypt.
What positive experience do you have? What is the best way to organize?

Answer 1

It is clear that if there are many subscribers, it is better to do CAS. Now there are consoles in which it is enough to enter a pin-code or password without using external cards. this is a firmware feature and is usually integrated into either your billing/middleware or cloud solutions.
If your billing is self-written and it is possible to directly issue commands / acl to the subscriber port, you just need to configure this port (disable mvr, block snooping, as you wish).
Further, if you use Option82 technology, you can certainly specify the necessary av-pair on ciscos to block multicast.
Next, you need to proceed from the fact that you already know how to do billing, and see what is easier.
PIM is usually not installed on access switches, since it is not known, all of a sudden, somewhere you have to stick a dumber device than a tsiska.