I'm wondering about in case of site-to-site vpn, we can only define one network statement for peer branch office network?
if there are one more local network in peer site, then, how to define those for peer local subnet?
Can anyone response about my question?
If I understand your question correctly you are wondering how to add another subnet to an existing site to site VPN tunnel?
If that is correct you can add that network to the crypto ACL of the existing site to site tunnel. But you must tear down and rebuild the tunnel for it to take effect.
once you have added the required configuration issue the following commands to tear down the tunnel. Keep in mind that doing this will disconnect any users on the VPN so it is best to let the users know when you are going to do this so they are not connected at that time.
clear crypto isakmp
clear crypto ipsec sa