diff --git a/include/odp/api/spec/ipsec.h b/include/odp/api/spec/ipsec.h
index a0ceb11..5655351 100644
--- a/include/odp/api/spec/ipsec.h
+++ b/include/odp/api/spec/ipsec.h
@@ -920,7 +920,7 @@ typedef struct odp_ipsec_op_status_t {
  */
 typedef struct odp_ipsec_op_param_t {
 	/** Number of packets to be processed */
-	int num_pkt;
+	unsigned num_pkt;
 
 	/** Number of SAs
 	 *
@@ -929,7 +929,7 @@ typedef struct odp_ipsec_op_param_t {
 	 *  * 1:       Single SA for all packets
 	 *  * num_pkt: SA per packet
 	 */
-	int num_sa;
+	unsigned num_sa;
 
 	/** Number of operation options
 	 *
@@ -938,7 +938,7 @@ typedef struct odp_ipsec_op_param_t {
 	 *  * 1:       Single option for all packets
 	 *  * num_pkt: An option per packet
 	 */
-	int num_opt;
+	unsigned num_opt;
 
 	/** Pointer to an array of packets
 	 *
@@ -1010,7 +1010,7 @@ typedef struct odp_ipsec_packet_result_t {
 	 *  fragments. All the fragments (of the same source packet) are stored
 	 *  consecutively in the 'pkt' array.
 	 */
-	int num_out;
+	unsigned num_out;
 
 	/** IPSEC SA that was used to create the packet
 	 *
@@ -1051,7 +1051,7 @@ typedef struct odp_ipsec_op_result_t {
 	 *  The operation updates it with the actual number of packets
 	 *  outputted.
 	 */
-	int num_pkt;
+	unsigned num_pkt;
 
 	/** Pointer to an array of packets
 	 *

From 40213f318cc323b9d2b2a0c9b8dde0d45d8b9a0f Mon Sep 17 00:00:00 2001
From: Dmitry Eremin-Solenikov <dmitry.ereminsolenikov@linaro.org>
Date: Mon, 10 Apr 2017 14:23:35 +0300
Subject: [PATCH 2/3] api: ipsec: mark odp_ipsec_sa_create argument as constant

odp_ipsec_sa_create() should not change its argument. Thus mark it as a
constant.

Signed-off-by: Dmitry Eremin-Solenikov <dmitry.ereminsolenikov@linaro.org>
---
/** Email created from pull request 13 (lumag:ipsec-api)
 ** https://github.com/Linaro/odp/pull/13
 ** Patch: https://github.com/Linaro/odp/pull/13.patch
 ** Base sha: 38485719c028918b019c6a5fc67cf05053421c83
 ** Merge commit sha: 80f41ee9602b2b4282da8907c9d2fa78fdb6aeb8
 **/
 include/odp/api/spec/ipsec.h       | 2 +-
 platform/linux-generic/odp_ipsec.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/odp/api/spec/ipsec.h b/include/odp/api/spec/ipsec.h
index 5655351..33a84ee 100644
--- a/include/odp/api/spec/ipsec.h
+++ b/include/odp/api/spec/ipsec.h
@@ -785,7 +785,7 @@ void odp_ipsec_sa_param_init(odp_ipsec_sa_param_t *param);
  *
  * @see odp_ipsec_sa_param_init()
  */
-odp_ipsec_sa_t odp_ipsec_sa_create(odp_ipsec_sa_param_t *param);
+odp_ipsec_sa_t odp_ipsec_sa_create(const odp_ipsec_sa_param_t *param);
 
 /**
  * Disable IPSEC SA
diff --git a/platform/linux-generic/odp_ipsec.c b/platform/linux-generic/odp_ipsec.c
index 5eb1be3..10918df 100644
--- a/platform/linux-generic/odp_ipsec.c
+++ b/platform/linux-generic/odp_ipsec.c
@@ -52,7 +52,7 @@ void odp_ipsec_sa_param_init(odp_ipsec_sa_param_t *param)
 	memset(param, 0, sizeof(odp_ipsec_sa_param_t));
 }
 
-odp_ipsec_sa_t odp_ipsec_sa_create(odp_ipsec_sa_param_t *param)
+odp_ipsec_sa_t odp_ipsec_sa_create(const odp_ipsec_sa_param_t *param)
 {
 	(void)param;
 

From 330973e1c1b029f67d629159761c559f4e9060e8 Mon Sep 17 00:00:00 2001
From: Dmitry Eremin-Solenikov <dmitry.ereminsolenikov@linaro.org>
Date: Mon, 10 Apr 2017 14:24:55 +0300
Subject: [PATCH 3/3] api: ipsec: add default queue for outbound events

If SA lookup fails for outbound IPsec packet in async mode, there is no
way to report it back to application except using default queue (which
does not exist at this moment).

Signed-off-by: Dmitry Eremin-Solenikov <dmitry.ereminsolenikov@linaro.org>
---
/** Email created from pull request 13 (lumag:ipsec-api)
 ** https://github.com/Linaro/odp/pull/13
 ** Patch: https://github.com/Linaro/odp/pull/13.patch
 ** Base sha: 38485719c028918b019c6a5fc67cf05053421c83
 ** Merge commit sha: 80f41ee9602b2b4282da8907c9d2fa78fdb6aeb8
 **/
 include/odp/api/spec/ipsec.h | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/include/odp/api/spec/ipsec.h b/include/odp/api/spec/ipsec.h
index 33a84ee..4e3ec16 100644
--- a/include/odp/api/spec/ipsec.h
+++ b/include/odp/api/spec/ipsec.h
@@ -188,6 +188,13 @@ typedef struct odp_ipsec_inbound_config_t {
  * Configuration options for IPSEC outbound processing
  */
 typedef struct odp_ipsec_outbound_config_t {
+	/** Default destination queue for IPSEC events
+	 *
+	 *  When outbound SA lookup fails in the asynchronous mode,
+	 *  resulting IPSEC events are enqueued into this queue.
+	 */
+	odp_queue_t default_queue;
+
 	/** Flags to control L3/L4 checksum insertion as part of outbound
 	 *  packet processing. Packet must have set with valid L3/L4 offsets.
 	 *  Checksum configuration is ignored for packets that checksum cannot
